An Active Directory Health Check

through PowerShell

Jeff Wouters | MVP Windows PowerShell[CEO | Automation Consultant] @ Methos

BSc, MCT, MVP, MCSA, MCSE, MCTS, MCITP

possessod

• PowerShell Script of System Center Documentation• PSSOSCD

Whatcha doin’?

• Users• Groups• Trusts• Replication• Subnets• Sites• DC’s• GPO’s

Bumps along the way…

• LDAP + ForEach + Where-Object =

• Maximum LDAP query results…

Execution time vs …

• Cmdlets• ADSI• LDAP• .NET

ForEach vs ForEach-Object

• ForEach = Slower• ForEach-Object = More memory consuming

• Note: This is a huge over-simplification• Watch the Hey!ScriptingGuy blog…

The problem is choice…

• Backwards compatibility is a bitch!*** Start upgrading already!!! ***

Which PowerShell versions to support?Which Operating Systems to support?Which Domain Level to support?Include GPO?Include DNS?Include DHCP?Support domains and/or forests?